CVE-2025-1925

CVE-2025-1925 is a denial-of-service vulnerability affecting Open5GS up to version 2.7.2, specifically within the AMF component's amf_nsmf_pdusession_handle_update_sm_context function. This flaw allows a remote attacker to crash the AMF, leading to a complete loss of mobility and session management services for all connected devices and blocking new registrations. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low complexity and no user interaction, resulting in a high availability impact. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, and no known Metasploit, Nuclei, or ExploitDB modules exist, nor significant community discussion or media coverage.